Source document: https://docs-lawep.s3.us-east-2.amazonaws.com/1698947577205.pdf (Uganda)
'j.:t-,....

.,: - - r- r:.

'l ] - 01 '5;:'' '"' REPUBLIC OF UGANDA & :l I PARLIAMENT OF UGANDA REPORT OF THE SECTORAL COMMITTEE COMMUNICATION TECHNOLOGY AND NATIONAL COMPUTER MISUSE (AMENDMENTI BILL, 2022 ON INFORMATION, GUIDANCE ON THE OFFICE OF THtr CLERK TO PARLIAMENT PARLIAMENT BUILDING- I(AA4PALA ^)"* * \3- SEPIEMBER 2022 7 A -t 1.O.

INTRODUCTION The Computer Misuse (Amendment) Blll, 2022 u'as read for the ltrst time on Ttresday 19th July, 2022 by Hon.
Mohammad Nsereko, MP, Kampala Central' Pursuant to Rule 129(1) of the Rules of Procedure of Parliament, the Bill was referred to the Committee on Information, Communication Technology and National Guidance for scrutiny.

The Committee has examined the Bill in accordance with Rule 129 (2) ol the Rules of Procedure of Parliament, and hereby presents its report.

2.O.

BACKGROUND The Computer Misuse Act, 2011 u,as enacted to protect electronic and cyber space users from crimes created or encountered online.
It regulates access to a computer, modification of computer material and disclosure of access code, among others.

The Act further creates offences, including for unauthorized access, modification of computer material, unauthorized disclosure of information, electronic fraud, child pornography, cyber harassment and cyber stalking.
The Act, therefore facilltates the safety and security of information systems by preventing abuse or misuse of informatron systems, thereby securing the conduct of electronic transactions in a trustworthv electronic environment.
The Computer Misuse Act,2071 defines a computer as an electronic, magnetic, optical, electrochemical or other data processing device or a group of such interconnected or related devices, performing logical, arithmetic or storage functions; and includes any data storage facility or communications facility directly related to or operating in conjunction with such a device or group of such interconnected or related devices.
In addition, according to section 2 of the Computer Misuse Act, 2011, a person rs deemed to have accessed a computer when he or she gains entry to any electronic system or data held in an electronic system or causes the electronic system to perform any function to achieve that objective. )
f" C- ) The Computer Misuse (Amendment) B1ll,2022 is generally premised on the need to enhance the enjoyment of the right to privacy which is being affected by the abuse of online and social media platforms through unauthorized access, the sharing of unsolicited, malicious, hateful and unwarranted information and to address new and eme rging threats to the enjoyment of the right to privacy which are not covered under the Computer Misuse Act, 201 1.
The internet is a significant means for socio-economic transformation in Uganda because it plays the key role of transforming the nation into a digital economy, with ICT contributing 4.8ok of lJganda's GDP.

Relatedly, according to the Uganda Police Force, Uganda has over 13.92 million internet users, with Facebook alone estimated to have over 2.4 million users, contributing to 5.5% of the population.
It is further reported that 8% of these accounts are suspected to be fake user accounts used to commit social media related crimes.
Organized criminal groups are equally on the rise using digital technologies to facilitate illegai activities such as theft, electronic fraud, attacks on computer hardware, software, hacking into emails and social media accounts, cyber bullying and cyber stalking, non- consensual sharing of intimate images, revenge pornography, ransomware, cyber terrorism, misinformation and disinformation, tech-facilitated radicalization and exl remism.

2.I.
2.I.

THE RIGHT TO PRIVACY ,w The 1995 Constitution of ttre Republic oI Uganda recognizes the right to privacy under Article 27 (21.

In the same spirit, Article 4 I prohibits the release of information which is likely to intcrfere with the right to the privacy of any otl,er person.

Further, a number of laws have been enacted to strengthen the protection of the right to privacy.
These include, the Computer Misuse Act,2O7l, Data Protection and Privacy Act, 2019, the Regulation of Interception of Communications Act, 2010, the Access to Information Act, 2005, , the Uganda <1 ,/z (,t t_' tc Communications Act, 2013, the Children Act, Cap.

59, the Electronic Transactions Act, 2011 and the Penal Code Act, Cap.

120.

In addition, Uganda is a signatory to international conventions which provide for protection and preservation of the right to privacy.
These include, Universal Declaration of Human Rights the International Covenant on Civtl and Political Rights, the African Charter on Human and Peoples'Rights, the Convention on the Rights of a Child, the African Charter on the Rights and Welfare of the Child.

Despite the existence of the legal framework on the right to privacy, the continued rapid advanceme nt in computer-generated technology presents dynamic challenges to the enjoyment of this right.
The enjoyment of the right to privacy is currently affected as the previously unimagined innovations in information technology continue to evolve, for example the abuse of online and social media platforms.

3.O.
THE OBJECT OF THE BILL The object of the Bill is to amend the Computer Misuse Act, 2011 to: (a) enhance the provisions on unauthorised access to information or data to strengthen the protection of the right to privacy; (b) prohibit the sharing of any information relating to a child without authorisation from a parent or guardian or any other person having authority to make decisions on behalf of a child; N (c) prohibit the sending or sharing of information that promotes hatred; and (d) provide for the prohibition of sending or sharing of misleading, malicious and unsolicited inlbrmation.
(e) restrict persons convicted of any offence under the Computer Misuse Act, 2011 from holcling public oflice for a period of ten years.

.

{ /l / ^fl 4.O.

METHODOLOGY In the process of analyzing the Bill, the Committee: (a) interfaced with the follou,ing s[akeholdersl (i) Hon.
Mohammad Nsereko, MP, Kampala Central- Mover of the Bill; (ii) Ministry of Information, Communication Technology and National Guidance; [iii) Attorney General; (iv) The Uganda Communications Commission; (v) The National information and Technology Authority-Uganda (NITA-U); (vi) The Uganda Police Force; (vii) The Uganda Law Society; (viii) Centre for Policy Analysis (CEPA); (ix) Independent Online Journalists Association - Uganda; (x) tr-Trade Association and Start-up Association of Uganda; (xi)Collaboration lor International ICT Policy in East and Southern Africa (crPESA); (xii) Human Rights Network for Journalists-Uganda; (xiii) Uganda Parliamentary Press Association; (xiv) Mr. Michael Aboneka of Thomas & Michael Advocate s; (xr) Injeel Ministries (xvi) Dr. Anthony C.K Kakooza; and (xvii) Unwanted Witness-Uganda (b) reviewed the following documents: W; (i) The Constitution of the Republic of Uganls, 1995; 4 N (ii) The Computer Misuse Act, 20 1 1; (iii)The Penal Code Act, Cap.
12O; (iv)The Uganda Communications Act, 2013; (v) The Data Protection and Privacy Act, 2019; (vi) The Regulation of Interception of Communications Act, 2OlO; (vii) The Children Act, Cap.

59; (viii) The Electronic of Transactions Act; (ix) The Access to Information Act, 2005; (x) Copyright and Neighbouring Rights Act, 20O6; and (xi) Written submissions from stakeholders, 5.O.
OBSERVATIONS AND RECOMMENDATIONS The Committee has examined the proposed amendments contained in the Computer Misuse (Amendment) Bill, 2022 in light of the Constitution and other relevant laws and makes lhe followrng observations and recommendations.

5.1.
5.1.

Unauthorized access Clause 2 of the Bill proposes to replace subsections (1) and (7) of section 12 of the Computer Misuse Act, 2071 to prohibit unauthorized access to or interception of any program or another person's data, unauthorized voice or video recording of another person and the sharing of any information about or that relates to another person.
Clause 2 also seeks to increase the fines for the offence of unauthorized access under section 12 of the principal Act from two hundred forty currency points to seven hundred fifty currency points.

The provisions of the Computer Misuse Act,2O11 which clziuse 2 seeks to amend s tate: "(1) A person tuho intentiortally accesses or intercepts anA program or data tuithout authoitg or permission to do so commits an offence.
,f ( 5 \\ ,t/1 n4D f, d (7) A person utho commits an offence under this section is liable, on conuiction, to a fine not exceeding ttuo hundred and fortg anrrency poirtts or impisonment not exceeding ten Aears or both."
The Committee has examined the proposals under clause 2 and appreciates that although the advancement in technology especially the computer-generated technology has improved communication and led to economic development, the internet has be come a platform for misuse and abuse which calls for the strengthening of the existing legal framework, The Committee noted that the proposals seek to strengthen the protection of the right to privacy by regulating the emerging abuses especially on social media platforms.
The Committee however, observed that the proposed subsection (1) of the Bill excludes the element of "intent", yet intention is an essential element in the commission of criminal acts.

This makes the provision overly broad to cover legitimate and inadvertent disclosure of information.

The Committee further observed that the proposed section 12(1) does not expressly provide for circumstances under which a person is deemed to have been authorized to access) intercept or share rnformation.
For example, information which is accessed, intercepted or shared with the consent of the person to whom the information is about or relates or where the information is accessed, intercepted or shared in compliance with the law should be expressly exempted.
This will enhance clarity and al1ow the flow of legitimate inlormation and authorized disclosures under the law, Recommendation The Committee recommends that clause 2 be adopted with amendments to include the element of "intent" and clearly provide for circumstances under which a person is deemed to have been authorlzed to access, intercept or share information.

6 ,/ b ,l l/ 5.2.

Unauthorised sharing of information about children.
Clause 3 seeks to prohibit the sending, sharing or transmitting of any informatlon about or relating to a child through a computer unless the person obtains consent of the child's parent, guardian, or any other person having authority to make decisions on behalf of the child.

The Committee has examined the proposals under clause 2 and appreciated the intended objective of the proposal which is aimed at strengthening protection and preservation of the right to privacy of children in the digital age.
The Committee noted that threats to children's privacy in the digital space are increasing at alarming rates.

Much as parents have a role to play in protecting their children's right to privacy, there is need to safeguard children's rights through enhanced regulation.

The CommiLtee however, noted [hat clause 3 is overly broad given that it prohibits the sharing of any inibrmation about or that relates to a child unless consent of a parent or guardian is obtained.
The provision has an effect of discouraging the public from sharing information about or that relates to a child in danger or in need of help since in most cases it is not probable to obtain the consent of the child's parenl or guardian.

This will discourage 'Good Samaritans' from coming to the rescue of chilclren, thereby disregarding the best interest of the child principle which should be the primary consideration in all matters involving or affecting children.
V /1 \ The Committee is therefore, of the considered opinion that there is need to provide for circumstances under rvhich informatron about children may be shared, including taking cognizance of the existing laws that already permit such disciosures.

,/ ,x ( (r I 7 < -/ ,/- -- q & Recommendation The Committee recommends that clause 3 be adopted with amendments to provide for additional circumstances under which information about or that relates to children may be shared.

5.3.

Hate speech.
5.3.

Hate speech.

Clause 4 seeks to prohibit hate speech through writing, sending or sharing of any information through a computer, which is likely to- (a) ridicule, degrade or demean another person, group of persons, a tribe, an ethnicity, a religion or gender; (b) create divisions among persons, or against a tribe, an ethnicity, a religion or gender; or (c) promote hostility against a person, group of persons, ethnicity, a religion or gender.
a tribe, an The Committee recognises that clause 4 is well intended given that it enhances the promotion of respect of human digrrity, social harmony, cohesion, maintenance of public order and protection of rights of others.

The Committee comparatively analyzed the regulation of hate speech in other jurisdictions and observed that hate speech is a permitted limitation to the freedom of expression in a number of jurisdictions.
In Canada, its Criminal Procedure Code prohibits hate speech and this was well decided by its Supreme Court in R Vs James Keegstra [199O] 3SCR 698-9 where Court considered a case where a teacher had taught anti-Jews propaganda to his students.

The Supreme Court was faced with the determination of the balance between the right to freedom of speech outlined in the Canadian Charter of Rights and Freedoms and the law's limits on hate speech sttpulated in the Criminal Code.
The Court ultimately ruled against Keegstra, the teacher, by deciding that Canada's hate laws imposed a "reasonable limit" on a person's freedom of expression.
,W tu'\ /'r\\w\ , \\v\ ffi ( TN The South Africa's Promotion of trquality and Prevention of Unfair Discrimination Act, 4 of 2OOO provides for the prohibition of hate speech under section 10 through publication, propagation, advocating or communication of words that could reasonably be construed to demonstrate a clear intention to be hurtful, harmful or to incite harm, or promote or propagate hatred.
The Committee further noted that the 2010 Constitution of Kenya under Article 33 (1) provides for freedom of expression and expressly provides for a clear limitation to freedom of expression.

Clause 2 of the same article states that the right to freedom ofexpression does not extend to hate speech.

In the same spirit, during the consideration of the appeal of Onyango Obbo & Anor Vs Attorney General (Constitutional Appeal No.
2 of 2OO2), the Supreme Court of Uganda considered and accepted a proposition of the Supreme Court of India in the case of Rangarajan Vs Jagijivan Ram & others; and Union of India & others Vs Jagjivan Ram (1990) LRC) which u,as to the effect that freedom of expression ought not to be suppressed except where allowing its exercise endangers community interest.
The Committee took cognizance of the offe nce of promoting sectarianism under section 41 of the Penal Code Act which is a permitted limitation to the freedom of expression.

However, the Committee noted that the provision is restrictive in as far it restrrcts the targeted groups to a religion, tribe, ethnic or regional origin.
The Committee further noted that the penalty prescribed does not match the gravity of the oflence , Therefore, the Committee supports the proposal under clause 4 that seeks to provide for the prohibition of hate speech.

Recommendation The Committee recommends that clause 4 be adopted.

'.

"tat &r ( 9 \ (i.

\ .

:/ -t) & 1, 5.+.

Unsolicitedinformation.

Clause 5 prohibits the sending or sharing of unsolicited information through a computer to or with another person.
The proposal seeks to strengthen the protection of the right to privacy by fighting spam.

The Committee appreciates that advancement in information technoiogy offers users a massive range of new products and services.

However, some users of online media platforms misuse or abuse the platform through sharing of unsolicited messages.
The Committee examined the proposal under clause 5 and observed that the Uganda Communications Act, 2013 and the Electronic Transactions Acl, 2O7l regulate the sharing of unsolicited SMS/MMS and unsolicited commercial communication respectively.
The Committe e however, noted that the regulation of unsolicited messages under the Uganda Communications (Text and Multimedia Messaging) Regulations, 20 19 is restricted to short messaging service (SMS) and multimedia messaging service (MMS) and therefore, do not apply to unsolicited information/ messages shared or transmitted over the internet such as WhatsApp etc.

On the other hand, the Electronic Transactions Act, 201 lregulates unsolicitecl commerciai communication.
The Committee therefore, noted that clause 5 is overly broad since it impliedly includes unsolicited information already regulated under Uganda Communications Act, 20 13 and the Electronic Transactions Act, 20 1 1 .
The Committee is of the opinion that clause 5 should be restricted to the regulation of information shared or transmitted over the internet, with the exception of unsolicited commercial communication and unsolicited information in public interest Recommendation The Committee recommends that clause 5 be adopted with an amendment to clearly def,ine the scope of unsolicited information to be regulated.

( 0 & 5.5.

Misleading or malicious information.


Clause 6 proposes to prohibit the sending, sharing or transmitting of any misleading or malicious information about or relating to any person through a computer.

Clause 6 also seeks to create an olfence for breach of the provision and provides for a penalty of a fine not exceeding seven hundred fifty currency points or a term of imprisonment not exceeding seven years, or both.
The Committee examined clause 6 and observed that, in the case of Charles Onyango Obbo and Another Vs Attorney General, Constitutional Appeal No.

2 of 2OO2, the Supreme Court declared section 50 of the Penal Code Act which provided for criminalization of publication of false news, unconstitutional.

The proposal to criminalize sending, sharing or transmrtting of misleading information has an effect of reintroducing the outlawed offence.
The Committee is therefore, of the opinion that reference to misleading information under Clause 6 should be deleted.

Recommendation The Committee recommends that clause 6 should be amended to remove reference to the criminalization of misleading information.

5.6.

Restriction on holding oflice.


Clause 7 seeks to introduce 6 n6q, provision in the Computer Misuse Act to restrict leaders and public officers who commit any offence under the Computer Misuse Act from holding an1, public office lor a period of ten years.

The Committee noted that the offences prescribed under the Computer Misuse Act,2Ol1 carry penalties which include fines and imprisonment sentences.
Clause 7 therefore, seeks to impose an additional penalty on leaders and public officers, a proposal that is not only extreme and not comme nsurate to the offence, but also discriminatory since it targets a single category of the likely offenders and leaves out others.
Given that the existing laws adequately provide ( 11 ..c \- ::/ n \ J t/ ffi n frh for the grounds for disqualifying or removal of leaders and also provide for grounds under which public officers may vacate or be dismissed from office, the clause should therefore, be deleted.

Recommendation The Committee recommends that clause 7 should be deleted.

5.7.
5.7.

Social Media In the undertaking of the consideration o[ the Bill, the Committee observed that the information technology evolution has create d a new medium of communication called Social Media that is not fully regulated in the existing 1aws.

The Committee further observed that Social Media is the commonest platform of Computer Misuse and noted the need to regulate the use of social media.
Recommendation The Committee recommends that provisions be included in the Bill to regulate social media and clearly define social media.

6.O.

CONCLUSTON Rt.

Hon.

Speaker and Honourable Members, the Committee has examined the Computer Misuse (Amendment) Bill,2022 and recommends that it is passed into Iaw, subject to the proposed amendments.

I beg to report.

( \ t2 pRoposED AMENDMENTS TO THE COMPUTER MTSUSE (AMENDMENT) B[LL,2022 CLAUSE 1: AMENDMENT oF COMPUTER MISUSE ACT,2011 Delete clause 1 .
Justification It is a consequential amendment arising from the deletion of clause 7.
CLAUSE 2 AMENDMENT OF SECTION 12 OF PRINCIPAL ACT Clause 2 is amended- (a) in the proposed subsection (1), by inserting the words "intentionally and" immediateiy after the word "who"; and (b) by inserting immediately alter the proposed subsection (1), the following- "(1a) A person shall be deemed to haue obtained authorisation under subsection (1) where the person- (a) obtains consent from the person to uthom the infonnation is about or relates; or (b) is authorised bg lau."
Justification l( The element of "intent" is :rn essential element in the commissron of criminal acts.

At common 121v, 2 mental element of a person's intention to commit a crime is paramount to secure a conviction.
a To achieve clarity by specifying the circumstances under which a person uld be deemed to have been authorized under the proposed subsection wo (1) ,@ 1,3 ,{ ( s & CLAUSE 3: INSERTION OF SECTIoN 22A IN PRINCIPAL ACT Clause 3 is amended by sllbstituting for the proposed subsection ( 1) , the following- "(1) A person shall not send, share or transmil any information about or that relates to a child through a computer unless- (a) the person obtains consent of the child's parent, guardian, or any other person having authority to make decisions on behalf of the child; (b) the person is authorized by law; or (c) the sending, sharing or transmitting of the information is in the best interest of the child."
Justification To enhance the protection of chiidren by providing for additional circumstances under which information about or that relates to children may be shared.

CLAUSE 5: INSERTION Or SECTION 24A IN PRINCIPAL ACT Clause 5 is amended in the proposed section 24A- (a) in the proposed subsectton (1) by inserting immediately after the word "computer" the words "unless the sending or sharing of the unsolicited information is in public interest."
(b) by inserting immediately after the proposed subsection (2), the following- "For the purposes of this section, "unsolicited information" means information transmitted to a person using the internet without the person's consent, but doe s not inciude an unsolicited commercial communication."

p' Justification a The insertion in subsection ( 1) is to allow the sharing of legitimate unsolicited information in public interest.
wr ( 1,4 E W a a The insertion of the definition of the phrase "unsolicited information" is to achieve clarity.

The exclusion of uusolicrted commercial communication in the definition of "unsolicited information" is to ensure consistency since unsolicited commercial communication is already regulated under section 26 of the Electronic Transactions Act, 201 I .

CLAUSE 6: INSERTION OF SECTION 26A IN PRINCIPAL ACT Clause 6 is amended in the proposed section 26A (1) by deleting the words "any misleading or".
Justilication To avoid contradiction 'lvith the Supreme Court decision in Charles Onyango Obbo and Another Vs Attornel, General, CA No.

2 of 2OO2 which declared section 50 of the Penal Code Act that provided for the crimin alization of publication of false news unconstitutional.
CLAUSE 7: INSERTION OF SECTION 27A IN PRINCIPAL ACT Delete clause 7 Justifrcation The additional penalty instituted on leaders and public officer on top of the criminal sanctions created under the Computer Misuse Act is excessive and discriminatory.

The existing larvs provide for sufficient grounds under which a leader ceases to hold office or may be disqualified from holding office.
INSERTION OF NEW CLAUSE Insert a new clause immediately after clause 6 as follows- "Misuse of social media (1) A person who uses social media to publish, distribute or share information, prohibited under the laws of Uganda or using disguised or false identity, commits an offence.
^n- ^'-*' .\n /_,/J_ t) j/11 (2) Where the rnlormation under subsection ( 1) is published, shared or distributed on a social media account of an organization, the person who manages the social media account oI the organization, shall be held personally liable for the commission of the offence.
(3) Por the purposes of this section, "social media" means a set of technologies, sites, and practices whrch are used to share opiniotrs, experiences and perspectives, and includes YouTube, WhatsApp, Facebook, Instagram, Trvitter, WeChat, TikTok, Sina Weibo, QQ, Telegram, Snapchat, Kuaishou, Qzone, Reddit, Quora, Skype, Microsoft Team and Linkedin.
(4) A person who contravene s subsection ( 1) is 1iab1e, on conviction, to a fine not exceeding five hundred currenclr points or imprisonment not exceeding five years or both.
(5) For the purposes of prosecution under this section, it shall be presumed, until the contrary is proved that the information published, distributed or shared on a social media account- (a) which is verified by a social meclia operator has been published by a legal or natural person; (b) is published, distributed or shared by the person or organization in whose name the telephone contact is registered; (c) which is registered using an email address which has been used or submitted as data by any data collecting entity, is published by the person or organization in whose name the email address is registered."
Justification To provide for the regulation of social media.

INSERTION OF NEW CLAUSE Insert a new clause immediately after clause 7 as follows- "Amendment of section 3O of principal Act The principal Act is amended in section 30 by repealing subsection (3)."

Justification @ 16 Subsection (3) of section 30 corrtradicts subsection (2) of the same provision which allows for the prosecution of a person who commits an offence under this Act, outside the territorial jurisdiction of Uganda.
./ 'r"r t- I l t7 $ MEMBER SIGNATURE SHEET NO NAME CONSTITUENCY SIGNATURE.'

I Hon.

Magogo Moses Hassim clP Budiope East County Hon.

Igeme Nathan Nabeta D/CP Jinja South Division East Hon, Elotu Cosmas Da.kabela County Hon.

Tinkasiimire Baunabas County Buyaga West Hon.

Ndeezi Alex Representative \-\ PWDs Hon.

Chemutai Phyllis DWR I(apchorwa Hon.

Acon Julius Bua Otuke County Hon.

Kambale Ferico Kasese Municipality Hon.

Lolem Micah Akasile Upe County Hon.


Mutiwa Geoffrey County Bunyole West ) T 11 Hon.

Chelangat Alinga Solomon T'oo Conntv t2 l3 t4 Hon.

Nebanda Florence DWR Butaleja I Hon.

Kamusiime Caroline DWR Rr"rkiga Hon, Kinobere Herbert Kibuklr County Hon, Ojok Andrew Oulanyah C)moro Countv 16 Hon.

Feta Geofrev Ar,rvu Division East I 17 18 19 20 2l 22 24 25 26 27 28 Hon.

Afoyochal Esther DWR Zombo Hon.


T\rmu,ine Anna Mary DWR Ntoroko Hon, Bainomugisha Jane DWR Ibanda Kabajungu Hon, Bagala Joyce Ntwatwa DWR Mitvana Hon.

Namugga Gorreth Mawogola South Ilon.

Kazibwe Bashir Mbazira Hon.

Isabirye Aga David Kawempe South Mte- Jinja City North W M Hon.

I(abugho Florence DWR Kasese Hon Hon.

Mpindr Bumali UPDF PWDs Representative Hon.

Abeja Susan Jolly DWR Otuke Hon.

Musa Noah Koboko County North 29 Hot-t. Kliza Kenneth Bujenje County Nyendwoha 1-9